debian11安装配置记录

安装

软件包默认是桌面环境 + gnome + 标准安装。如果做服务器，建议标准安装 + ssh server

设置静态ip

cd /etc/network/interfaces.d
vi ifcfg-ens3

auto ens3
iface ens3 inet static
address 172.29.50.32
netmask 255.255.255.0
gateway 172.29.50.10
dns-nameservers 223.5.5.5
dns-nameservers 8.8.8.8
mtu 1500

设置dns

vi /etc/resolv.conf

nameserver 223.5.5.5
nameserver 8.8.8.8

配置apt源

1. vi /etv/apt/source.list
2. 注释掉默认的cdrom源
3. 修改为清华源。如果https不行，那么deb和http之间添加[trusted=true]，并将https改为http
4. 改完能直接下载后，再执行apt install apt-transport-https ca-certificates
5. 最终：

# 默认注释了源码镜像以提高 apt update 速度，如有需要可自行取消注释
deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye main contrib non-free
# deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye main contrib non-free
deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-updates main contrib non-free
# deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-updates main contrib non-free

deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-backports main contrib non-free
# deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-backports main contrib non-free

deb https://mirrors.tuna.tsinghua.edu.cn/debian-security bullseye-security main contrib non-free
# deb-src https://mirrors.tuna.tsinghua.edu.cn/debian-security bullseye-security main contrib non-free

配置sshd

1. 如果安装时候没安装ssh server，那就需要安装openssh-server
2. 设置允许root登录

vi /etc/ssh/sshd_config
# 找到PermitRootLogin，将其值修改为yes

安装常用包

apt install -y wget git curl sysstat lrzsz net-tools neovim tcpdump bpftrace bpftool python3-pip zip unzip supervisor iotop free dos2unix ntp fio mlocate lsof psmisc python3-pip ipython3

配置vim

• 取消鼠标左键选中进入visual mode

cd /usr/share/vim/vim82
vim ./default.vim
# 找到 set mouse=a，改为set mouse-=a

修改系统语言

因为安装的时候选择的系统语言是中文，所以在此改为英文，便于处理字符集问题。

# 查看当前的系统语言
env | grep LANG
export LANG=en_US.UTF-8

# 进入伪GUI。空格是选中
dpkg-reconfigure locales

shutdown -r now

配置pip源

mkdir ~/.pip
vim ~/.pip/pip.conf

[global]
index-url = https://mirrors.aliyun.com/pypi/simple/

[install]
trusted-host=mirrors.aliyun.com

bash美化

占位

系统参数优化

limits.conf

在debian11中，limits.conf的通配符*对root不生效，必须显式指定

root hard nofile 65535
root soft nofile 65535
* hard nofile 65535
* soft nofile 65535

sysctl.conf

net.ipv4.ip_forward = 1
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.core.somaxconn = 2048
net.ipv4.ip_local_port_range= 1024 65535
net.core.rmem_default = 262144
net.core.wmem_default = 262144
fs.file-max = 104857
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_rmem = 4096 4096 16777216
net.ipv4.tcp_wmem = 4096 4096 16777216
net.ipv4.tcp_mem = 786432 3145728  4194304
net.ipv4.tcp_max_syn_backlog = 16384
net.core.netdev_max_backlog = 20000
net.ipv4.tcp_fin_timeout = 15
net.ipv4.tcp_max_syn_backlog = 16384
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_max_orphans= 131072

问题记录

• git clone提示“GnuTLS recv error (-110)”

git config --global http.sslVerify false